Author: HackWatchit

SMS of Death: Android under attack, an invisible SMS can block calls and emergency services Pierluigi Paganini November 01, 2026 SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too. A specially manipulated SMS message is enough to crash Android’s phone service, interrupt ongoing calls, and temporarily render the smartphone unusable. The attack requires no interaction from the victim and can even compromise the ability to contact emergency services. The vulnerability, dubbed the SMS of Death, is bringing renewed attention to the security of the messaging system in Android…

Read More

A new cyberattack is weaponizing everyday search results to trick users into running malicious code on their devices. The campaign, dubbed “Adception,” was uncovered by Push Security. By buying paid search ads on Google and routing traffic through trusted web services, attackers are placing deceptive links directly in front of people searching for popular software. Then, they use a social engineering framework known as “ClickFix” to trick people into running malicious scripts on their devices. How the Adception Campaign Works Search ads appear at the very top of search engine results, making them easy to click and easy to trust.…

Read More

Advanced persistent threats were once the domain of highly skilled and well-funded attackers. Infrastructure teams could realistically deploy “good enough” security to reduce friction in their day-to-day because nation-state techniques demanded budgets, time, and expertise that most attackers did not have. That assumption no longer holds. AI is making sophisticated attack capabilities cheaper, faster, and available to many more adversaries. The recent Hugging Face incident made that shift tangible. An autonomous AI agent chained ordinary weaknesses across production infrastructure, used overly broad credentials, and moved at a scale no human operator could sustain. When attackers can operate at machine speed,…

Read More

In brief CFTC Chairman Michael Selig told CNBC the $6.4 billion Binance hack “proves our exact point” for the crypto-market rules the agency proposed this month. Selig characterized the attack as a laptop-introduced vulnerability rather than a blockchain flaw—but Binance has since found “additional points of breach.” The CFTC chair cast on-chain traceability as a regulatory advantage. The record-breaking hack of Binance is exactly why offshore crypto exchanges need U.S. oversight, CFTC Chairman Michael Selig argued, using the roughly $6.4 billion theft to press the agency’s case for a federal rulebook.Speaking to CNBC on Friday, Selig said the breach “proves…

Read More

A VPN is the most effective way for consumers to gain online privacy. Reliable VPNs encrypt your internet traffic, hide your IP address from the websites you visit, and prevent local networks and ISPs from tracking your online activities. The caveat? Not all consumer-facing VPNs offer the same level of protection. Keep reading to learn about common VPN vulnerabilities. VPN apps, protocols, servers, and privacy policies can all contain weaknesses. A poorly designed VPN could leak your IP address or DNS requests, meaning it wouldn’t actually stop third parties from monitoring your traffic. Other VPNs fail to protect you when…

Read More

The AI software-development platform Cursor, which is owned by SpaceX, had a malicious Anthropic Claude Code extension for Windows, macOS, and Linux live in its integrated development environment extension marketplace for roughly 11 hours on Thursday. The company says the rogue extension was downloaded by “at most 5,000 users.” Cursor briefly shut down the extension marketplace while it investigated the situation, which the company says did not impact any other extensions.The tainted extension was designed with a backdoor to give attackers access to victim devices—the type of implant that malicious hackers often use as a stepping stone to deeper control…

Read More

Topic: Are We Ready for the Agentic Enterprise? Closing the Blind Spots in AI Security? Watch Now Abstract: AI is rapidly evolving from a tool that responds to human instructions into systems capable of planning, reasoning, using tools, accessing data, and taking autonomous actions. As organizations embrace agentic AI, the traditional boundaries of enterprise security are beginning to shift. The current webinar examines the emerging security challenges of the agentic enterprise, focusing on the blind spots created when AI agents interact with applications, APIs, enterprise data, identities, and external tools. It will explore risks such as excessive agent autonomy, privilege…

Read More

On October 6, 2026, the ASOS push notification hack sent unauthorized messages to millions of customer devices after cybercriminals accessed a connected third-party platform. ASOS, a British online fashion and cosmetic retailer serving active shoppers worldwide, confirmed that an attacker compromised employee credentials to access external systems. As reported by BBC News, the intrusion exposed customer contact records and personal search histories, although company representatives confirmed that banking and payment information was not accessed. How the Attack and Social Engineering Breach Worked The unauthorized messages originated from an extortion ring calling itself the Xuanyewen hacker group. The intruders hijacked the…

Read More

Rilian, a provider of AI-native cybersecurity and defense technology solutions, announced expansion of its commitment to secure critical infrastructure by partnering with the U.S. Office of the National Cyber Director (ONCD) on a pilot program to protect rural hospital systems in South Carolina. Collaborating with the U.S. Department of Health and Human Services (HHS), Governor Henry McMaster, and South Carolina Law Enforcement Division’s Critical Infrastructure Cybersecurity Initiative, the pilot will strengthen protection against cyberattacks and improve resilience for South Carolina’s rural hospitals. Rilian brings deep expertise in agentic systems integration and a single command layer with the tools and intelligence…

Read More